Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
cherryhq/cherry-studio
main @ 9b642d6
53
Fixes
2
CVEs
HIGH
Peak severity
22.9%
Coverage
Highlights
Auth Bypass: 11 prior fixes. Scrutinize any change in this area.
src/renderer/src/pages/home/Markdown/Markdown.tsx: most-fixed (4 issues). Treat as high-risk during review.
30 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: Unrestricted URL schemes and unsafe path parameters passed into Electron's shell utility (such as openExternal and openPath) allow attackers to execute arbitrary system binaries or remote files. Defending this boundary requires strict protocol allowlisting and path canonicalization.
Path Traversal: A high volume of path traversal issues across multiple filesystem services, backup managers, and plugin managers highlights the risk of malicious paths bypassing root boundary constraints. Safe resolution and prefix checking are required globally to contain filesystem access.
Command Injection: Dynamic lookup of system utilities or execution of internal scripts using unsanitized user inputs or lack of argument separators can allow attackers to inject arbitrary shell flags or execute commands.